Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RFcEpw4S7wh891iO1S6Y-VFd3Xg.roa
File: RFcEpw4S7wh891iO1S6Y-VFd3Xg.roa (raw, json)
Hash identifier: DY57VPOTd9xV8a95GRVMpNUDJSY6PfzXj+wUAy6A4C4=
Subject key identifier: 44:57:04:A7:0E:12:EF:08:7C:F7:58:8E:D5:2E:98:F9:51:5D:DD:78
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018CC3B6C92F21509CC2F870463E05522B96
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RFcEpw4S7wh891iO1S6Y-VFd3Xg.roa
Signing time: Mon 01 Jan 2024 06:29:45 +0000
ROA not before: Mon 01 Jan 2024 06:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200590
IP address blocks: 45.159.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c9:2f:21:50:9c:c2:f8:70:46:3e:05:52:2b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 06:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=445704a70e12ef087cf7588ed52e98f9515ddd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:d7:cc:67:2c:5a:be:05:84:ff:d6:3c:d3:
aa:ab:87:ea:04:41:da:b3:ff:7b:73:63:a3:63:6f:
8e:00:58:ce:a4:24:5e:53:b9:f1:d7:a9:d0:5d:c6:
a2:ed:e3:59:56:78:5f:d7:9f:b4:04:7a:0b:fd:e1:
45:0e:bf:cd:ad:90:ee:fd:da:27:35:e3:b9:0b:ff:
4d:1d:5e:ef:5e:96:a9:5b:e5:fc:d7:90:92:32:47:
d1:e5:5a:d8:3a:70:17:d6:1f:40:05:36:17:12:a9:
74:d7:b0:67:c3:82:e3:a6:0a:80:17:dc:5d:b3:77:
dc:4d:b0:14:dc:cd:2e:0a:df:2c:99:c0:ca:24:ff:
9b:c6:51:33:aa:9e:ef:2f:02:6c:ea:3a:30:da:b3:
92:e2:6f:5a:a1:a1:d8:77:37:e3:a4:22:ca:6c:51:
24:ab:79:f7:b0:fe:25:92:34:93:86:b6:bc:b6:6d:
6e:38:31:e0:d1:04:a1:34:e2:38:8b:80:ff:8f:c2:
04:b8:ba:fc:d4:ad:96:64:f0:1f:b9:74:48:ab:04:
37:49:93:2f:e9:69:c5:0e:f1:a0:5d:7a:bc:ae:40:
a7:66:b9:cc:9e:4f:70:30:da:cc:e6:ba:6a:a1:59:
db:17:43:30:af:61:56:dd:94:ec:7a:5d:bb:7a:3a:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:04:A7:0E:12:EF:08:7C:F7:58:8E:D5:2E:98:F9:51:5D:DD:78
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RFcEpw4S7wh891iO1S6Y-VFd3Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.250.0/24
Signature Algorithm: sha256WithRSAEncryption
00:51:21:04:a6:47:2f:9c:c2:ab:f7:9b:29:6f:64:56:fe:95:
78:40:39:4b:e0:35:07:bc:27:b4:73:1f:e9:b2:04:a4:9b:03:
e0:d3:5e:63:3a:d8:9e:4d:a2:bf:b2:be:6d:b9:94:b3:5e:f9:
86:e0:76:1a:09:e6:7d:f5:6b:99:ee:b6:f3:a2:db:a8:b4:38:
ac:02:71:2f:25:e4:26:f2:54:fe:6d:07:58:87:9f:e9:6a:d8:
03:f6:0e:61:1f:53:1c:d5:a6:da:3c:98:b5:54:c8:ad:7a:05:
b9:40:a3:b1:d2:9d:81:26:76:65:25:1c:af:a5:e8:ba:09:4e:
12:21:40:e1:14:79:30:98:5d:80:a3:91:23:74:68:c4:8f:72:
47:6e:d8:cd:f7:d3:67:d9:a3:74:4e:df:8b:19:41:91:18:ee:
f0:74:9b:1c:25:70:fc:ab:be:2a:c5:fe:78:5c:c1:11:30:e9:
20:0a:67:00:5c:ed:14:fb:1c:f0:36:dc:c5:67:9c:df:22:e7:
61:b7:8f:a7:ca:56:09:6f:9f:17:69:ec:38:72:11:84:e2:f8:
94:c1:c7:5a:c1:05:5e:60:17:86:6d:47:ce:71:39:01:93:d1:
72:9a:b5:cc:bf:bb:e7:2a:92:30:c1:24:29:c1:c8:e4:60:5d:
0d:9a:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:24 2025 by rpki-client